This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft
File:                     CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft (raw, json)
Hash identifier:          OK5Qu9c+CUXcHvgqcWML8R+UiGp11wUpua9Ddz6P71s=
Subject key identifier:   6F:93:87:2C:63:8A:CE:2D:1E:5E:65:0A:C2:5D:58:44:12:56:DB:AF
Authority key identifier: CF:C8:86:EC:4D:9F:2C:4A:31:EE:53:AC:15:71:4B:D4:E7:02:87:52
Certificate issuer:       /CN=CFC886EC4D9F2C4A31EE53AC15714BD4E7028752
Certificate serial:       29A307EB46A16624076F4B6C370B458523130A1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft
Manifest number:          0139
Signing time:             Sun 25 Jan 2026 14:05:05 +0000
Manifest this update:     Sun 25 Jan 2026 14:00:05 +0000
Manifest next update:     Mon 26 Jan 2026 15:02:05 +0000
Files and hashes:         1: 323830343a326565633a3a2f33322d3438203d3e20323634383631.roa (hash: Pmd2oHMVN3RO65spy8KBeP91n4F+2uJwEIYTdWohKkU=)
                          2: 3136382e3230352e35322e302f32322d3234203d3e20323634383631.roa (hash: sszuikLyJCfK/q7HZ7Bf5gDMhQQ8QEhvjEDczDvmx9s=)
                          3: CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.crl (hash: f1ZZfuAG/izBIlidmVadMMLifVLTddqhHZGpQN/DHwo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.crl
                          rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a3:07:eb:46:a1:66:24:07:6f:4b:6c:37:0b:45:85:23:13:0a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFC886EC4D9F2C4A31EE53AC15714BD4E7028752
        Validity
            Not Before: Jan 25 14:00:05 2026 GMT
            Not After : Jan 26 15:02:05 2026 GMT
        Subject: CN=6F93872C638ACE2D1E5E650AC25D58441256DBAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:22:c5:76:ac:8c:cb:b9:ce:0d:fc:e4:7b:8e:
                    20:a3:89:5c:33:da:29:b4:4a:25:17:8d:c9:9d:3e:
                    23:1a:f9:72:89:59:ac:4a:2b:18:7d:c3:5d:93:5e:
                    7a:dd:49:14:94:c8:b4:c9:d7:6d:a9:58:9f:4f:31:
                    0d:b9:5a:93:63:07:95:67:8c:06:3d:55:2a:23:7c:
                    13:90:ec:cd:63:8b:f9:9d:ff:cd:9c:47:93:ec:63:
                    4f:aa:bd:66:ad:f7:3d:af:d8:4e:ca:83:05:8c:4a:
                    3b:79:d9:d6:dc:c9:b4:89:0c:29:a4:2d:60:29:9f:
                    3e:2f:68:c3:5f:b9:a2:b7:05:67:ec:10:c1:52:c5:
                    89:48:2d:dd:30:43:87:c2:42:67:b1:85:fc:d6:ad:
                    9e:07:b1:01:73:73:04:65:c3:93:af:0a:59:81:6a:
                    d3:17:bc:a1:b7:0e:1a:55:ef:9c:88:8e:68:aa:ad:
                    c5:a9:92:fa:0b:43:20:ca:e0:2f:20:38:40:03:9a:
                    30:8a:6c:a6:75:31:25:56:08:1c:68:df:2c:06:63:
                    2e:c3:ca:cd:3a:0b:c8:50:cf:1d:d6:20:f2:de:69:
                    22:fd:fd:22:df:f2:d3:5d:b7:8d:05:08:65:1e:d5:
                    e0:18:e4:81:02:af:24:3e:6b:c1:5e:ca:82:b5:d7:
                    06:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:93:87:2C:63:8A:CE:2D:1E:5E:65:0A:C2:5D:58:44:12:56:DB:AF
            X509v3 Authority Key Identifier:
                keyid:CF:C8:86:EC:4D:9F:2C:4A:31:EE:53:AC:15:71:4B:D4:E7:02:87:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:a9:6b:5d:f3:17:bf:a5:af:d4:54:66:3c:84:3b:d1:a3:6c:
         cb:72:9f:9d:ac:82:87:27:77:63:f8:53:0e:cc:92:ec:54:e4:
         1d:15:f2:c4:5d:61:3f:3d:65:9f:c6:52:d6:41:d9:c6:c7:41:
         14:34:6d:b2:4c:bd:32:47:49:3f:9b:93:c5:d0:b5:5c:e6:e2:
         49:f2:8f:f5:1b:9d:84:e6:2e:a6:e0:8f:1b:53:4c:c9:e3:dd:
         69:65:ea:44:ff:6c:47:3d:60:82:e1:d8:0d:31:d3:90:b7:c4:
         27:97:6f:ff:01:42:b7:b8:fb:96:43:9f:45:e3:5c:aa:78:eb:
         56:f8:59:c0:0b:35:2b:89:ee:8f:47:6c:d4:b5:85:a1:9f:5f:
         ee:f5:0b:96:44:4a:42:0a:fc:ad:35:e2:30:1d:c8:4f:9c:2f:
         da:db:b4:1c:39:67:ba:d5:9f:99:63:18:b3:2b:cb:c6:31:1e:
         9f:dd:69:09:24:6e:6a:c1:2a:26:8f:33:c8:9e:f5:2e:d8:ff:
         7f:ad:4a:79:5e:c9:ed:22:da:7a:d9:15:a8:a4:65:07:be:cb:
         49:bd:d9:8e:78:1a:ce:71:93:15:4a:77:2d:5e:ef:3d:df:b3:
         28:16:de:ed:ca:bc:d4:a7:6b:ed:f6:7c:64:71:7c:7a:2b:78:
         65:50:7c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:23:34 2026 by rpki-client